CVE-2007-0006

Publication date 6 February 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as “spinlock CPU recursion.”

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
linux-source-2.6.15 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper
Fixed 2.6.15-29.58
linux-source-2.6.17 7.04 feisty Not in release
6.10 edgy
Fixed 2.6.17.1-12.40
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-451-1
    • Linux kernel vulnerabilities
    • 11 April 2007

Other references